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Abstract 

Let ¥ q be the finite field of q elements. Let H C F* be a multiplicative subgroup. 
For a positive integer k and element b £ ¥ q , we give a sharp estimate for the number of 
fc-element subsets of H which sum to b. 



1 Introduction 

Let F q be the finite field of q elements of characteristic p. Let H C ¥ q be a subset. Let 
1 < k < \H\ be a positive integer. For b £ ¥ q , let Mjj(k, b) denote the number of fc-element 
subsets S C H such that 

J2a = b. 

aeS 

The decision version of the fc-subset sum problem for H is to determine if Mj{(k,b) > 0. 
This problem arises naturally from a number of important applications in coding theory 
and cryptography. It is a well known NP-complete problem, and thus there is not much 
more one can say about the solution number Mn(k,b) in such a generality. The main 
difficulty comes from the combinatorial flexibility in choosing the subset H and thus the 
lack of algebraic structure for the subset H. From algorithmic point of view, the dynamic 
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algorithm [2] can be used to show that the decision version of the fc-subset sum problem 
can be solved in polynomial time if H is a large subset of ¥ q in the sense that \H\ is of size 
(f for some constant e > 0. From mathematical point of view, we are more interested in 
the actual value of the solution number Mn(k, b). Ideally, we would like to have an explicit 
formula or an asymptotic formula for the solution number Mjj(k, b). This is apparently too 
much to hope for in general. However, we believe that it should be possible to obtain an 
asymptotic formula for the number Mn(k, b) for k in certain range if H is close to a large 
subset of ¥ q with certain algebraic structure. For example, it is shown in fl] that if ¥ q — H 
is a small set, then a good asymptotic formula for Mn(k, b) can be obtained. In addition, if 
H = ¥ q , or F* or any additive subgroup of ¥ q , then an explicit formula for Mn(k, b) (with 
no error term) is obtained in [4 J [5 J . 

When H is close to a multiplicative subgroup of ¥ q , the situation is more complicated 
as the multiplication operation is different from the addition operation in the subset sum 
problem. A multiplicative subgroup is far from the additive structure. The subset sum 
problem in this case becomes a highly non-linear algebraic problem with combinatorial 
constraints. In this paper, we study the case that H is a multiplicative subgroup of F* 
and obtain a sharp asymptotic formula for the number Mn{k,b) if the index [F* : H] is 
reasonably small. Our main tool is the new sieve formula from [5] together with standard 
character sum arguments over finite fields. 

From now on, we let H be a multiplicative subgroup of F* with index m. Thus, \H\ = 
(q — l)/m. The number of /c-subsets of H is ( \ \ an d the sum could be any element 
b of the field ¥ q . One expects that in favorable cases that the fc-subset sums are equally 
distributed and thus Mu{k,b) should be about |( ^ m )- The key is then reduced to 
estimating the error term. Our main result is the following 

Theorem 1.1. Let 1 < k < (q — l)/m. For b E ¥*, we have the asymptotic formula 

K>>-K (? ~r)|^T-> 

and for 6 = 0, we have 

,i , lf(q-l)lm\ 

where p is the characteristic of ¥ q . 
Because of the obvious symmetry 

M H (k,b) = M H {\H\-k,J2 a - b ), 

aeH 

we may without loss of generality assume that k < \H\/2 = (q — l)/2m. 

Corollary 1.2. Let p > 2. There is an effectively computable absolute constant < c < 1 
such that if m < c^fq and 6\nq < k < then Mjj{k, b) > for all b G ¥ q . 



< 



k 



: 
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Note that even in the case that H is a multiplicative subgroup of F*, we still do not 
know a complete polynomial time algorithm to decide if Mu(k,b) > 0, if m is large. The 
result in above corollary gives a partial answer to this algorithmic question. The case that k 
is small (say, k < 61ng) can be treated using an easier Brun sieve approach p], but to get a 
non-trivial lower bound, one needs to assume that m is significantly smaller. For example, 
in the case k = 2, one may need to assume that m < q 1 ^ to guarantee the existence of 
a non-trivial F g -rational point on the curve X™ + X™ = b. For algorithmic purpose, the 
small k case can often be done by a quick exhaustive search or by using the more efficient 
dynamic algorithm. 

To illustrate our ideas, we will also consider the following related but somewhat simpler 
problem of counting points on diagonal equations with distinct coordinates. Since H is a 
subgroup of F* with index m\(q — 1), we have H = {x m \x £ F*}. For < k < q — 1, let 
N^(k, b) denote the number of solutions of the diagonal equation 

X? + x% + ■ ■ ■ + xf = b, 

where the Xi's are in F* and the x^s are distinct. There is an obvious way to compute 
N^(k,b) via the classical inclusion-exclusion principle. Define 

X = {(xi, x 2 , . . . , x k ) € (F*) fc |< + x? + ■ ■ ■ + xf = b}. 

Then 

N^(k,b) = #{(xi,x 2 , ...,x k )e X\xi / Xj,i / j}. 

Let 

Xij = {(xi,x 2 , ...,x k )e X\xi = Xj ,i^ j}, Xfj = X - Xij. 
Applying the classical inclusion-exclusion principle, we obtain 

^(k,b) = \ p| x%\ 

\<i<j<k 

=i*i- e e \x^\jx st \-...+(-ip\ p x l3 \. 

\<i<j<k l<i<j<k Ki<j<k 

l<s<t<k 

Each term on the right side can be estimated using some basic properties of Gauss sum 
and Jacobi sum. The main terms are of at most 0(q k ). However, the number of terms in 
the above inclusion-exclusion is 2(2) which can add up to a total error term which may be 
greater than the main term 0(q k ) as soon as k is greater than Q(^fq). Fortunately in [5], 
J.Y.Li and D. Wan presented a new sieve for distinct coordinate counting problem which 
can be used for our estimation. This sieve reduces the number of total terms from 2(2) to 
k\, allowing us to deduce non-trivial information for k as large as a fraction of q (and thus 
much larger than 0(y/q). We will introduce their sieve briefly in Section 2. Now we state 
our main asymptotic formula for the number N^(k, b). 
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Theorem 1.3. For all b £ F* we have 



N^(k,b) 



(g-i)* 



< — mJq + k + - 

V P/fc 



and for 6 = 0, we /ioue 



N* m (k,0) 



(9-1)a 



P/fc 



where (t)^ = t(t — 1) ■ ■ ■ (t — k + 1) for a real number t. 
Again, we have the symmetry 

N^(k,b)=N^(q-l-k,J2 



b). 



Thus, we may assume that < k < (q — l)/2. 



Corollary 1.4. Let p > 2. There is an effectively computable absolute constant < c < 1 
such that if m < c^fq and 61ng < k < then N^(k, b) > for all b E F 9 . 

Some preliminaries will be introduced briefly in section 2. In section 3, we will illustrate 
the asymptotic formula for the number N^(k,b). The punchline will be our asymptotic 
formula for Mff(k, b). 



2 Preliminaries 

2.1 Li-Wan's new sieve 

In [5], J.Y. Li and D. Wan presented a new sieve for the distinct coordinate counting 
problem. We will introduce it briefly. 

Let D be a finite set. For a positive integer k, let D k = D x D x ••• xfl be the 
Cartesian product of k copies of D. Let X C D k . Every element x £ X can be written as 
x = (x\, . . . ,Xk) with Xi £ D. We are interested in counting the number of elements in X 
with distinct coordinates, i.e., the cardinality of the set 

X = {(x 1 , ...,x k )€ X\xi / xj,i / j}. 

Let Sk be the symmetric group. For a given permutation r £ S^, write its disjoint cycle 
product as r = (ii • • ■ ioi)(ji • • • ja 2 ) " " " (A " " " ^a s )j where a,i > 1, 1 < i < s. Define the sign 
of r as sign(r) = (—l) k ~ l ( T \ where Z(r) is the number of disjoint cycles in r. Define 

X T = {(xi, ...,x k )e X\x h = ■■■ = x iai ,.. .,x h = --- = x las }. 

We have the following theorem: 
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Theorem 2.1. 

\X\ = s W n ( T )\X T \- 

Moreover, the group Sk acts on D k by permuting its coordinates, that is 

ro (xi,...,x fc ) = (x r(1) , . . . ,a; r ( a )). 

If X is invariant under the action of Sk, we call it symmetric. A permutation r £ Sk is said 
to be of type (ci, . . . ,c&) if r has exactly c, cycles of length i. Let N(ci, . . . , Ck) denote the 
number of permutations of type (ci, . . . , c&) in Sk- We have the following theorem which 
will be used in our main results of this paper. 

Theorem 2.2. If X is symmetric, then 

\X\= Y, (-l) fc " Ec ^(ci,...,c fc )|X T |. 

J2iCi=k 

2.2 Some combinatorial formulas 

In order to prove the main results in this paper, we need to know some combinational 
formulas as follows. Their proofs can be found in [Sj. Let N(c%, . . . , c^) be the number of 
permutations of type (ci, . . . , c&) in Sk- From [6], we can see: 

N(ci,. . . ,c fc ) 



l c ici!2 c 2c 2 ! ---k^Ckl 
Lemma 2.3. Define the generating function 



(1) If tx = ■ ■ ■ = t k = q, then 

C k (q, ...,q) = (q + k- l) k - 

(2) If q > d, d\(q — s) and t% = q for d\i, U = s for d\i, then 

C k (s,...,s,q,s,...,s,q,...) = k\Y{ !1 -s_ 1 ){ g _ 1 )■ ( 2 - 1 ) 



Lemma 2.4. For any giver positive integers m, n, q and I, we have 

E 



i>0 

As a corollary, we get 



l + (q- A / l + q + 1 
n J \ m J ~ \m + n + 1 
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Corollary 2.5. For any given positive integers s,d,k,q with q> s and d\(q — s), we have 

d-l d-l 



Proof. 



C fc (s7'.^ - s,g,s7'.^~s,g, ...) < ( s + k-\ — 



d-i d-i L$J 



i=o v d 7 v 

2.3 Gauss sums and Jacobi sums 

In this subsection, we review and prove some basic properties of Gauss-Jacobi sums that 
are needed in our proof. 

Definition 2.6. A multiplicative character on F* is a map x from F* to the nonzero complex 
numbers C* that satisfies x( a b) = x( a )x(b) for all a,b £ F* We extend the definition to 
the whole field ¥ q by defining 



X(0) 



i, x = i; 

0, otherwise. 



Definition 2.7. Let x be a multiplicative character on ¥ q and a G F 9 . Set 

where £ = e 2m / p and Tr denotes the trace map from ¥ q to F p . The sum g a (x) is called a 
Gauss sum on ¥ q and we often denote gi{x) by g(x)- 

Proposition 2.8. // x ^ 1, ^en |g(x)| = vo- 
lt's proof can be seen in [3] when q = p, where p is a prime. For q = p r , the proof is 
similar. 

Definition 2.9. Let xi> ■ ■ ■ > Xn be multiplicative characters on F g . We define the following 
four Jacobi type sums by 

J(Xl, ■ ■ ■ ,Xn) = ^2 Xl(yi)X2(V2) ■■■XniVn)- 
yi-\ — H/»=l 

Mxi, ■ ■ ■ ,Xn) = E xi(yi)X2(y2) ■■■Xn(y n )- 

yiH — Hm=o 
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J*(Xl,---,Xn) = Xl{yi)X2{y2)---Xn{Vn)- 

yiH han=l 

all y^O 

JoiXl,- ■ ■ ,Xn) = Yl Xl(Vl)X2(V2)---Xn(Vn)- 

J/lH hyn = 

all y i7 ^0 

The first two sums are standard Jacobi sums. The last two sums are related to the first 
two sums. These Jacobi type sums have the following properties: 



Proposition 2.10. Let %i x = ■ ■ ■ = Xi e = 1 but Xi e+1 ^ h ■ ■ ■ , Xi n 1- Then , 

J(Xl,X2, ■■■ ,Xn) = 



e+1 

? n_ \ ife = n, 
0, i/1 < e < n. 



«MXl,X2, • • • ,Xn) = < 



<? n 1 , ife = n, 

0, z/ 1 < e < n, 

0, «/e = 0, X1X2 • • -Xn / 1, 

Xn(-l)(g - l)^(xi.X2, • • • ,Xn-i) otherwise. 



j*, s i iKq-ir-i-lT], ife = n, 

J (xi,X2,---,xnj = < ; 

[ (-l) e AXi e +i'Xie+2'---'Xi„) ! if0<e<n. 

J *(Xl,X2,...,Xn) = { iK?- 1 )"-^- 1 )^ 1 )"" 1 ]' i/C = n ' 

° " \ (-l) e ^o(Xi e+ i,Xi e+ 2 ) --->Xi„), i/0<e<n. 
Proof. If yi,y2,- ■ ■ ,Vn-i are chosen arbitrarily in F 9 , then y n is uniquely determined 
by the condition y 1 + y 2 + ■ ■ ■ + y n = 0. Thus J (l, 1, . . . , 1) = J(l, 1, . . . , 1) = g™" 1 . An 
application of the inclusion-exclusion principle gives 

J*(l,l,...,l)= Y 1 

VlA han = l 

= q- 1 - (") q n - 2 + (-i) 2 Q <r 3 + • • • + (-ir 1 ( n " x ) <f 
= - q [(q-ir -(-in 



Similarly, 



j *(i,i,...,i)= Yl 1 

VlH hyn=0 

= E E 



SGF* !/l+''' + yn-l = - s 

(q- l)J*(xi,...,Xn-l) 
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If e = 0, then none of the Xi is trivial and thus Xi(0) = 0. We obtain 

Xl(j/l)X2(l/2) ■■ -XniVn) = Xl(j/l)X2(l/2)---Xn(yn). 

2/H H/n=l Wl + -+l/n=l 

as the term xi (yi)X2(y2) ••• XniVn) yields if there is some yi = 0. Hence, we complete 
the proof of J*(xi, X2, • • • , Xn) = J(xi, X2, ■ ■ ■ , Xn)- The proof of Jq (xi, X2, • • • , Xn) = 
Mxi,X2, • • • ,Xn) is similar. 

If 1 < e < n, without loss of generality, we may assume that XI1X2, ■■■ ,Xe are trivial 
and the rest are nontrivial. Then 

Y Xi(yi)X2(y2) ■ ■ ■ XniVn) 
2/iH \-y n =0 

= <f~ l Yj Xe+l(ye+l)Xe+2(y e +2),...,Xn(yn) 

He+l,ye+2, — ,yn 

= <f~ l Y Xe+l(Ve+l) Y Xe+2(Ve+2) • • • ^ Xn{Vn) = 0. 
2/e+l J/e+2 Vn 

Thus Jo(xi) X2j • • • j Xn) = 0) and similarly for J(xi, X2, • • • , Xn)- For J* Jacobi sum, we can 
apply the inclusion-exclusion principle and deduce 



J*(Xl,X2,---,Xn) = Y Xe+liVe+l) ■ ■ ■ XniVn) 



Vl~\ h j/n=l 

Vi ^0,l<i<n 

= Y Xe+liVe+l) ■ ■ ■ XniVn) 

VlA hj/n=l 

i/j#0,l<i<e 

X] Xe+liVe+l) ■ ■ ■ XniVn) ~ ^ Xe+l(l/e+l) ■ ■ ■ Xn(j/n) 

J/lH \-Vn = i V2-\ hj/n=l 

+ --- + (-l) e ^ Xe+l(j/e+l)---Xn(l/n) 

2/e+l H h2/n=l 

= , l,Xe+l,. • • , Xn) H h (-l) 6 J(Xe+l,- • ■ ,Xn) 

= (-l) e </(Xe+l,-..,Xn)- 

The proof for J *(xi, X2, • • • , Xn) is similar. 
Finally, if e = 0, then 

MXl,X2, ■ ■ ■ ,Xn) = Y Y Xi(yi)x2(y2) ■ ■ ■ Xn-l(yn-l)Xn(s) 

s yi+V'2-i — \-y n -i=s 

We can assume s / in the above sum and define y\ = —yi/s. Then 

Y xi(yi)x2(j/a)---xn-i(yn-i) 

2/H hj/n-l=-S 

= XlX2---Xn-l(-«) X] Xl(yi)X2(2/ 2 )---Xn-l(yn-l) 

= X1X2 • • • Xn-l(-s)J(Xl,X2, • • • , Xn-l)- 
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Combining these results, we have 

MXl,X2, ...,Xn) = X1X2 ■ ■ ■ Xn-l(-l)J{Xl,X2, ■■■, Xn-l) ^2 XlX2 ■ ■ ■ Xn(s). 

The last sum is if X1X2 ■ ■ ■ Xn 7^ 1 and g — 1 if X1X2 ■ • • Xn — 1- The proposition is proved. 
Proposition 2.11. If Xi, X2, ■ ■ ■ > Xn are nontrivial and X1X2 ■■■ Xn 7^ 1 , we have 

g(xi)g(x2) ■ ■ -g(xn) = J(xi,X2, ■ ■ ■ ,Xn)g(xiX2 ■ ■ ■ Xn)- 

Corollary 2.12. // xi, X2, ■ ■ ■ > Xn are nontrivial and X1X2 ■ ■ ■ Xn = 1? then 
(1) 

g(xi)g(x2) • --gixn) = x n (-i)q J (xi,X2, ■ ■ -,Xn-i)- 

(2) 

J(Xl,X2,---,Xn) = -Xn(-l)J(Xl,X2,---,Xn-l). 

Proof. The proofs of Proposition and corollary above 12.111 can also be seen in [3] when 
q = p, and when q = p r , the proofs are similar. 

Proposition 2.13. Assume that XI1X2, ■ ■ ■ , Xn ar ^ nontrivial. 

(1) If X1X2 ■■■Xn + 1, then 

\J(Xi,X2,-..,Xn)\=q {n - 1)/2 . 

(2) If X1X2 ■ ■ -Xn = 1, then 

\Mxi,X2,...,Xn)\=(q-l)q {n/2) - 1 . 

and 

\J(Xl,X2,...,Xn)\=q {n/2) - 1 - 
As a corollary, if all the x% are nontrivial, we have 

\J(Xi,X2,-..,Xn)\<q {n - l)/2 . (2.2) 

Proof. Their proofs are directly from Proposition 12.111 Proposition 12.81 Proposition 12.101 
and Corollary EJ2J 

3 Solutions with distinct coordinates 

Recall that M#(/c, b) denotes the number of fe-element subsets S C H such that YlaeS a = b. 
Namely, M#(/c, b) is the number of unordered /c-tuples (x±, X2, ■ ■ ■ , Xk) with distinct Xi G H 
such that 

x\ + x 2 H \-x k = b. (3.1) 
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If we denote Nu(k, b) be the number of ordered fc-tuples with distinct coordinates satisfying 
the equation above, it's clear that Njj(k,b) = k\Mii{k,b). 

Note that H = {y m \y G F*}. If (x\,X2, ■ ■ ■ ,x^) is a fc-tuple satisfying the equation 
above, then there exist some y% G F* such that x% = y™, 1 < i < k, and (yi,y2, ■ ■ ■ , 2/fc) is a 
fc-tuple satisfying the following equation 

y? + y? + --- + yT = b. (3.2) 

Let N^(k, b) be the number of ordered fc-tuples (yx,y2, ■ ■ ■ , yt) with distinct y, L G F* satis- 
fying equation (|3.2|) . 

Remark 3.1. The number of solutions with distinct coordinates in H for equation (|3.ip 
(i.e.Nji(k, b)) is not equal to the number of solutions with distinct coordinates in F* for 
equation (|3.2p (Le.iV^ (fe. b)). However there exists a delicate relationship between them, 
which will be described in details later. 

3.1 Estimate for N^(k, b) with 6^0 
As defined above, 

N^(k,b) = #{(xi,x 2 ,...,x fc ) G (F* q ) k \x? + x% + ■ ■ ■ + xf = b, Xl distinct for 1 < i < k}. 
For a positive integer d and element a G ¥ q , we shall use the following well known relation: 

#{x G ¥ q \x d = a}=Y, X(a), 
x a =1 

where % runs over all multiplicative characters of ¥ q of order dividing d. 
In this subsection, we will estimate N^(k, b) for b G F*. 

Lemma 3.2. Let di, • • • ,d n be positive integers. Define 

N* = #{( Xl ,...,x n ) G {¥* q ) n \a lX dl +... + a n x d n " =6}, 
where b, Oj(l < i < n) are m F*. T/ien, u>e Ziaue 

n— 1 n 

<z e n k - * w b_i - (3.3) 

e=0 l<i e+1 <i e+ 2<---<i n <n j=e+l 



N* --[(q -1)" -(-!)»] 
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Proof. Without loss of generality, we can assume 6 = 1 and di\(q — 1). 

n n 

**= e n#{ai4=m}= e nE 



Xi 



»lH hWn=l 1=1 



a,: 



E II * 1 ( Ct *) E XI (yi)- ■■XniVn) 



v dl -...-v dn -1 * =1 
Xi An — 1 

:![(,_ !)«_(_!)»] 

n-1 



BlH hj/n = l 



+ E E n^^CXl.-.Xn) 



X<! = ' ' ' = Xi e = 1 
W e+1 ,..-,Xi„ * 1 

re— 1 n 



+ E E nx _1 (ai)(-l) e ^(xwi- 



e=0 <*i 

Xl 



• = x£" = 1 

Xij = ■ ■ ' = Xi e = 1 
X* e _|_;L > ■ ■ ■ ' Xi n 7^1 

With Proposition 12.131 we have 



N * _ [ (g _(_!)»] 



n-1 

SE E 

e=0 l<i e+ i<i e +2<— <in<ni=e+l 



n - i)v^~ e_i - 



As a corollary, if dj = m, for all 1 < i < A;, then 

n-1 



N* 



1 



[(g - 1)" - (-I)"] 



re— i / \ 
e=0 ^ ' 

< (l + (m-l)V5) n /V9- 



(3.4) 
(3.5) 



Theorem 3.3. For a// 6 G F* we Ziaue 



(9-1)* 



v 7 ? 



< — my/q + k + - 



PJk 



Proof. Let X* = {(xi, ... ,Xk) G (F*) fc |x™ + • • • + = b}. As X* is symmetric, we 
can apply 

N* m {k,b)= (-l) k -^ c 'N( Cl ,...,c k )\X* T \, 

wherer is of type (<*,..., c fc ), and X* = {(%,...,%,) G (F*)£ c *|x^ + • • • + xf Cl +2x%[ + 
• • • + 2x™ C2 + • • • + kXfa + • • • + kx™^ = b}. In order to compute N^(k, b), we should compute 
\X*\ first. Denote 

{,w = 1, * 
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and n = Y^ c «(l — $i(p))- Then, 

\X* T \ = (q- • • ,x iti , • • • ) G (F*)"| £ ixg = 6}. 

l<i<fc;l<*i<e^, 



Applying (|3.4|) . we have 
1 



< (g- i)I>^(p) + ( g _ i)Eci-5*(p)(i + ( m _ ^^EciCi-^W)/^ 
Then apply Theorem 12.21 and Corollary 12.51 we have 



N^(k,b) 



q-(m- Vjy/q 



< — (m-l)^q + k + 
VQ V P 

< — (m-l) x /q + k+^— 



P/fc 



< — - ( mJq + k + 



Theorem 3.4. Lei p > 2. There is an effectively computable absolute constant < c < 1 
such that if m < c^fq and 31n4g < k < ^ then N* n (k, b) > for all b G F*. 

Proof. Replacing c by a smaller constant if necessary, we may assume that m < 
Cyjq — 1 < y/q, then (m — l)y/q < m-y/g — 1. By Theorem 13.3^ it is sufficient to prove 



(9-1) 



> 



2 /a- 1 



- 



_ i + k + m-v/g - 1 

V? V p / fe 



that is 



(?-l)fc 



This holds obviously when the following inequality holds: 



1 



2=i + fc + mVfF 7 ! 



> (4g) 2* . 



Since m < c-^/g — 1 and < ^rp, it is sufficient to prove the following inequality holds: 



1 



> 



>(4?) 



Now, p > 3 and thus 1/p + 1/2 < 5/6. It is sufficient to choose a positive constant c 



satisfying the inequality c < 



(4<j)27F 



This is possible if (4q)2k < e 1 / 6 , where e is the 



natural number. That is, if k > 3 In Aq. The proof is complete. 
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3.2 Estimate for N^(b,0) 

We now turn to the study of the number N^(k, b) when 6 = 0. 
Lemma 3.5. Let d±, ■ ■ ■ ,d n be positive integers. Let 

iV * = ...,!„)€ (F*) n |ai^ + • • • + anxt = 0}, 

where a, L £ F* Then, 



NS-- q (q-l) n 



< 



q-1 



n-l 



+ E E (ff-i)?^- 1 - 



e=o w + ... + v 6Z 



Ktj . <d,- . -1 
— *J — 'j 



Proof. Without loss of generality, we can assume di\{q — 1). 



E n#{^ = ^}= E II E 



WlH h!/n = i=l 



»lH \-Vn=0 i=l dj 



E II * H^) E Xl(l/l)-"Xn(j/n) 



x rfi=...= x d„ =1 i=l 
1 



Mil Vyn=0 



= -[( g -l)»-(g-l)(-l)»-l] 

n— 1 n 

+e e n^KKixi,. 

e=0 xf 1 = --- = x£" =i i=1 



,Xr, 



X<! = • • ' = X» e = 1 
Xi.i, i ■ ■ • j Xi„ 1 



1 



\n-li 



g -[(g-l) B -(ff-l)(-l) r 

n— 1 n 

+ E E II x _1 K)(-i) e ^o(xi e+1I • • • , *j. 

e=0 x ^i = ... = x d n=1 i=l 



e + 1 J ■ " ■ ' ■X-^n 



Xi e = i 
Xi„ # 1 



By the estimation for the sums Jq and J in Proposition 12.131 we have 



N$-±(q-l) n 



< 



q-1 



n-l 



+ E E (ff-i)^- 1 - 



e=0 'i. i i (i 

<T7 + --- + ^T e: 



1 < i e -i-i < ■ ■ ■ < in < n 

In particular, when d{ = m for all 1 < i < n, we have 

n-l 



K--(<?-iy 



< 



: • ^E ( n )(™-ir- e v?- e ] 

q e=0 

-(l + (m-l)^r<(l + (m-l)^) r 
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Theorem 3.6. We have 



N^(k,0) 



(9-1)/ 



< ( + k + - . 

PJ k 



(3.7) 



Proof. Let Xq = {(x\, . . . , x k ) € (Fg)*|x™ H + x™ = 0}. As X is symmetric we can 

apply 

N^(k,0)= £ (-l)^ c ^( Cl ,..., Cfc )|X * T |, 

where r is of type (<*,..., c fe ), and A * T = {(xn, . . . ,x fcCfc) e (F*)£ Cl |x^ + h x^ + 

2x2i + • • • + ^ x 2c 2 ^ + + " " " + = 0}- I n order to compute N^(k, 0), we need 

to compute Xq t first. Let 5i(p),n be defined the same way as before. We have 

|A * T | = (q- 1)5>*«#{(. • • ,x iti , • • ■ ) € (F*)"| £ fag = 0}. 



l<i<fc;l<ti<Ci> 



With the result of Lemma I3.5L we can conclude 



\X, 



Or 



(9-l) E< 



< (g - 1)£ c A(p)(1 + (m - l)v^) n . 



Applying Theorem 12.21 and Corollary 12.51 we have 

(g-i)* 



iV*(M) 



< J] iV( Cl , C2 ,..., Cfc )(g-l)S^(p)(l + ( m -l)^)« 

P /* 



< (m-l)y/q + k + 



< mJq + k + - 
V PA 

Theorem 3.7. Lei p > 2. There is an effectively computable absolute constant < c < 1 
such that if m < c^fq and 61ng < k < then N^(k,0) > 0. 



Proof. The proof is similar to the proof of Theorem 13.41 



4 The subset sum problem 

Suppose if is a subgroup of F*, so H = {x m |x G F*}, as F* is a cyclic group. Our goal is 
to estimate Njj(k,b) ( and thus Mfj(k,b)), which is the number of solutions with distinct 
coordinates in H of the following equation 

xi + x 2 H h x k = b. 

Actually, let 

X = {(xi,x 2 , ...,x k )e H k \xi + x 2 H h x k = b}. 
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Then 



N H (k,b) = #{(xi,x 2 , ■ ■ ■ ,Xk) E X\xi distinct}, 



Obviously, X is symmetric. So we can apply Li-Wan's new sieve formula to compute 
N H (k,b). 



4.1 Estimate for N H (k, b) with b^O 

Similar to the analysis above, we need to compute X r first, where r is a permutation of 

type (ci,c 2 , . . . ,Cfc) in S k , and X T = {(xu, . . . ,xi ci) . . . ,x kCk ) G F^ Ci |a;ii H + x ici + 

• • • + /cxfc C( . = 6}. Note that ^ zcj = A;. 



Theorem 4.1. For any 6 E F* we /iave 



JV H (fc,6)-- 



9 V m Jk 



mp J k 



Proof. As H = {x m \x G F*}, we can write x^ — Uit some Viti ^ -^(p where 
1 < i < kj 1 < t{ < Ci. So X T equals the following 

X* T = {( yu , ■ ■ .,yi Cl ,. ■ .,y kCk ) g (F*)2>|^ + • • • +yia + ■ ■ ■ + kyT Ck = &}■ 

Note that y m = (y') m iff y = y'£, where £ is an m-th root of unity. The number of variables 
in X T is Yl °i > so 



\Xr\ 



XI 



m 



where \X*\ has been computed in section 3.1. Then \X T \ is given by 

_ . . , Xitv . . . ) e ( F *)«| £ fa £ = 0}. 



i<i<fc 

l<t 4 < Ci ,pti 



Thus 



g m 



< 



2( g - l)E^i(p)(i + ( m - l) % /g)Eci(l-^(p)) 

As analyzed above, applying Theorem 12.21 and Corollary 12.51 we can conclude 
1 ( Q- 1 



N H (k,b) 



m 



2 _ ^g-l^ EcA(p Vl + (m-l)^" 

< -y= 2^ N(ci,C 2 , - ■ ■ ,C k ) ' ' ' ' 



m 



771 



1 



^9 V m m P J k 

<^ F (VQ + k + — i 



As a corollary, we have 
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Corollary 4.2. For b G F*, we have 



Theorem 4.3. Zei p > 2. There is an effectively computable absolute constant < c < 1 
such that ifm< c^fq and 31n4g < k < %fl then M H (k, b) > for all b G F* 



Proof. Replacing c by a smaller constant if necessary, we may assume that y/q < c 
By Corollary 14.21 it is sufficient to prove 



g-1 

m ' 



1 



q m 



-)*>2((c+i) 



1 



rn 



+ 



1 



mp 



k/y/q- 



That is, 



(2=1) 

V m I k 

(( c + 1)3=1 + 3=1), 



>2^. 



This holds obviously when the following inequality holds: 

1 



equivalently, 



c < 



r > <to) 



(4g)afc 



p I 



Since p > 3, we have 1/p + 1/2 < 5/6. The existence of such a positive constant c is 
possible if (4g)2k < e 1//6 , where e is the natural number. That is if k > 31n4q. The proof 
is complete. 



4.2 Estimate for M H (k,0) 

In the following, we discuss the case when 6 = 0. 
Let 

= {(xi,x 2 , ... ,x k ) £ H k \x 1 + x 2 H h x k = 0}. 

Then 

N H (k,0) = #{(xi,x 2 , ... ,Xfc) G X |xj distinct}. 

Obviously, Xo is symmetric. So we can apply the new sieve formula to compute Njj(k,0). 
Similar to the analysis above, we need to compute Xq t first, where r is a permutation of 

type (ci,c 2 , ... ,cjfc) in S*, and X 0t = {(xn, . . . ,x\ Cl ,. . . ,x kCk ) G H^ Ci \xu H h xi Cl + 

• • • + /cxfc Cfc = 0}. Note that ^ icj = k. 

Theorem 4.4. 

9 V m A 
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Proof. As H = {x m \x G F*}, we can write x^ = y™. for some yu t G F*, where 
1 < i < k, 1 < ti < Ci. So Xq t is related to 

X* 0r = {(y u , . . . , y lci , . . . ,y fcc J G (F*) Ec « + • • • + + ■ ■ ■ + ky^ k = 0} 

by the formula 

X* i 
v Or' 
Ar — 



where \Xq t \ has been computed in section 3.2. It follows that |Xo r | is given by 
_A_ (9 _l)E^W #{( ... ):Citi) ...) e ( F * r | £ «c^=0}. 



l<i<fc 



Thus 



IX, 



0r|--(— ) 
g m 



< 



( g - i)E^.(p)(i + (m - l)V9) ECi(1 " 



<5«(P)) 



771 



As analyzed above, applying Theorem 12.21 and Corollary 12.51 we can conclude 



^(M) --(—), 



< N( Cl ,C2,.... 



Ck 



< 



(m-l)V5 + l 



q _ 1 \J2c i Si(p) n + (rn-l)y/q 



m 



m 



+ k-l + 



m 



q-1 

mp J k 



< ^/q + k + 



mp J 



As a corollary, we have 
Corollary 4.5. 



M H (k,0) 



9-1 



q\k 



Theorem 4.6. Lei p > 2. There is an effectively computable absolute constant < c < 1 
such that if m < Cy^ a^rf 61ng < k < f/ien Mjj(k, 0) > 0. 



Proof. The proof is similar to the proof of Theorem 14.31 
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